Which snap-in should you use?

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008 R2.

The network contains an enterprise certification authority (CA).

You need to ensure that all of the members of a group named Managers can view the event log entries for Certificate Services.

Which snap-in should you use?

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008 R2.

The network contains an enterprise certification authority (CA).

You need to ensure that all of the members of a group named Managers can view the event log entries for Certificate Services.

Which snap-in should you use?

A.
Active Directory Administrative Center

B.
Authorization Manager

C.
Certificate Templates

D.
Certificates

E.
Certification Authority

F.
Enterprise PKI

G.
Group Policy Management

H.
Security Configuration Wizard

I.
Share and Storage Management

Explanation:
There is mention of an Event Log Reader Group. Membership should be able to be configured in AD Users and Groups. Check this answer. In the MMFSH dump he has the anwser AD Users and Groups, however this is not a option here so I have left it Group Policy Management.



Leave a Reply 8

Your email address will not be published. Required fields are marked *


Ahmed

Ahmed

i think A is the true answer
and “G” not true
as Gpo’s linked to to sites , domain and ous’s but not to groups

Frank

Frank

A is not the correct answer. Adding them to a random group is going to do anything. The question specifically says the group already exists.

The only valid answers are E or G.

You could create a GPO (linked to the domain with security filtered to the CA, or the OU that contains the CA) that assigns permissions to the Managers group. Explained in the answer section here: http://class10e.com/Microsoft/which-snap-in-should-you-use-9/

You could also use the CA to add permissions to view the event logs (http://www.kurtdillard.com/StudyGuides/70-640/6.html, 1/3 of the way down)

ichko

ichko

I totally agree with Ahmed – ADAC can assign user to groups!

Baboo

Baboo

I have checked and G is correct to have to enable in GPO not ADAC.

ichko

ichko

I can make group Managers member to Event Log Readers.

What needs to be done in GPO ? pls explain

ichko

ichko

I can make group Managers member to Event Log Readers via ADAC.

What needs to be done in GPO ? pls explain